What is claimed is: 

1. An encryption circuit that generates from a cipher key 
a plurality of round keys having a number of bits corresponding 
to a predetermined processing block length and executing, for 
each processing block length, input data and round key 
encryption/decryption processing, by means of a round function 
unit comprising an XOR operation unit that XORs the input data 
and one of the round keys and a round processing unit that 
iterates round processing that includes Byte Sub transformation, 
Shift Row transformation, Mix Column transformation and Round 
Key Addition , wherein: 

said round processing unit comprises: 

a first selector that segments input data into execution 
block lengths smaller than said processing block length; a first 
Round Key Addition circuit that adds said round key value to 
input data for each said execution block length; 

an intermediate register/Shift Row transformation circuit 
that temporarily stores the output of said first Round Key 
Addition circuit and executes Shift Row transformation using 
said processing block length; 

a Byte Sub transformation circuit wherein 

said intermediate register/Shift Row transformation 
circuit value is inputted for each said execution block length 
and Byte Sub transformation is executed; a second Round Key 
Addition circuit wherein 
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said intermediate register/Shift Row transformation 
circuit value is inputted for each said execution block length 
and said round key value is added for each said execution block 
length; 

5 a Mix Column transformation circuit executing Mix Column 

transformation on the output of said second Round Key Addition 
circuit; and 

a second selector that outputs to said first Round Key 

Addition circuit one output from among the outputs of said first 
10 selector, intermediate register /Shift Row transformation 

circuit, Byte Sub transformation circuit, or Mix Column 

transformation circuit. 

2. An encryption circuit according to claim 1 wherein said 

execution block length is a multiple of 8 bits. 
15 3. An encryption circuit according to claim 1, wherein said 

processing block length is 128 bits and said execution block 

length is 32 bits. 

4. An encryption circuit according to claim 1, wherein the 
key length of the cipher key is any of 128 bits, 192 bits or 256 

20 bits. 

5. An encryption circuit according to claim 1, wherein: 
said Byte Sub transformation circuit comprises a matrix 

operation unit for decryption that executes a matrix operation 
on input data; 

25 a third selector that outputs either the input data or the 



output of said matrix operation unit for decryption; 

an inverse operation unit for executing an inverse 
operation on the data outputted from said third selector; a 
matrix operation unit for encryption that executes a matrix 
5 operation on the data outputted from said inverse operation 
unit; and a fourth selector that outputs either the output of 
said inverse operation unit or the output of said matrix 
operation unit for encryption. 

6. An encryption circuit according to claim 5, wherein said 
10 matrix operation unit for decryption and said matrix operation 

unit for encryption comprises an XOR circuit so as to perform 
8-bit operations at one clock cycle* 

7. An encryption circuit according to claim 5, wherein said 
matrix operation unit for decryption and said matrix operation 

15 unit for encryption comprises an XOR circuit so as to perform 
1-bit operations at one clock cycle. 

8. An encryption circuit according to claim 1, wherein said 
intermediate register /Shift Row transformation circuit can be 
used for both encryption and decryption through the reversal of 

20 order of input of shift data relating to amount of shift for data 
to be inputted into said intermediate register/Shift Row 
transformation circuit , the input order for decryption being the 
reverse of the order for encryption. 

9. An encryption circuit according to claim 1, wherein said 
2 5 Mix Column transformation circuit comprises a plurality of 
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multiplication units with unique multipliers and an XOR circuit 
that performs XOR operations for said plurality of 
multiplication units, said Mix Column transformation circuit 
executing a matrix operation between data inputted into each 
5 multiplication unit and the multiplier established for each 
multiplication unit. 

10. An encryption circuit according to claim 9, wherein 
said Mix Column transformation circuit comprises 4 operation 
units having 4 multiplication units capable of 8-bit unit 

10 operations and XOR circuits that execute XOR operations based 
on the outputs of said 4 multiplication units. 

11. An encryption circuit according to claim 9, wherein 
said multiplication units can control 2 multipliers and are used 
for both encryption and decryption. 

15 12. An encryption circuit according to claim 11, wherein 

said multiplication units are constituted to control addition 
values from high-order bits. 

13. An encryption circuit according to claim 1 having a key 
expansion schedule circuit that generates from said cipher key, 
20 as an expanded key segmented into bit numbers corresponding to 
said execution block length, a plurality of round keys with bit 
numbers corresponding to a predetermined processing block 
length; the key expansion schedule circuit comprising: 

a fifth selector that segments a cipher key into the number 
25 of bits corresponding to said execution block length and outputs 
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the same; 

a shift register to which flip-flop circuits are connected 
at a plurality of stages, said flip-flop circuits latching data 
in units of said execution block length; 
5 a first XOR circuit that XORs the output of the final stage 

flip-flop circuit of said shift register with one constant 
selected from among a group of constants; 

a sixth selector into which are inputted the outputs of 
those flip-flops of said shift register that are involved in 
10 operations for encryption and the outputs of those flip-flops 
involved in operations for decryption, and which selectively 
outputs one of these; 

a Rot Byte processing circuit that rotates the output of 
said sixth selector; 
15 a seventh selector into which the output of said sixth 

selector and the output of said Rot Byte circuit is inputted and 
which selectively outputs one of these; 

a Sub Byte processing circuit that executes Byte Sub 
transformation on the output of said seventh selector for each 
20 said execution block length; 

an eighth selector into which the output of said sixth 
selector and the output of said Sub Byte processing circuit are 
inputted, and which selectively outputs one of these; 

a second XOR circuit that executes an XOR operation based 
25 on the output of said first XOR circuit and the output of said 
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eighth selector; and 

a shift register unit selector that selectively outputs, 
to those flip-flops of said shift register the outputs of which 
are subject to operations for encryption, either the output of 
said second XOR circuit or the output of the adjacent stage 
flip-flop. 

14. An encryption circuit according to claim 13, wherein 
said shift register comprises 8 flip-flops executing data 
processing in 32-bit units, and said sixth selector is 
constituted so that the outputs of the second, fourth, sixth and 
eighth flip-flops from the bottom from among said flip-flops are 
inputted therein, and that it outputs one of these. 

15. An encryption circuit according to claim 13, wherein 
through the input into said seventh selector of the output of 
said intermediate register/Shift Row transformation circuit and 
the input into said second selector of the output of said Sub 
Byte processing circuit, a single circuit can be used for said 
Sub Byte processing circuit and said Byte Sub transformation 
circuit of said round processing unit. 



